Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
File: 9LndnjT-ZtdROJA3CPjOH700LWQ.mft (raw, json)
Hash identifier: 51Q47BwOFuxcZHEqC+L5U7Xkiv2TU5lyyZtXuzpgyFs=
Subject key identifier: 4C:BB:11:EA:54:7D:1F:C4:83:37:F3:72:83:02:8B:FD:FB:19:B1:14
Authority key identifier: F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
Certificate issuer: /CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Certificate serial: 019896A6BB4AAF3A9600E2448FC0F218DE86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
Manifest number: 162C
Signing time: Mon 11 Aug 2025 01:02:45 +0000
Manifest this update: Mon 11 Aug 2025 01:02:45 +0000
Manifest next update: Tue 12 Aug 2025 01:02:45 +0000
Files and hashes: 1: 9KjqbMoowr4zIwC0vIDCLJx3OPk.roa (hash: P/sEcAl8BwOGFXxtB8+HWMsFUjWpgx7ANde/4kLha4c=)
2: 9LndnjT-ZtdROJA3CPjOH700LWQ.crl (hash: 6NnkQrTkGQ+EcZn8cnAa8+6SivhClzi1Qz/+QXGkou4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:bb:4a:af:3a:96:00:e2:44:8f:c0:f2:18:de:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Validity
Not Before: Aug 11 01:02:45 2025 GMT
Not After : Aug 12 01:02:45 2025 GMT
Subject: CN=4cbb11ea547d1fc48337f37283028bfdfb19b114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:87:5f:9b:46:8d:64:d1:41:84:18:a0:e6:55:
ee:62:54:0a:58:0c:9e:7c:da:52:85:7a:e1:38:74:
d6:ea:0a:2d:7b:72:44:e2:50:2b:b0:e6:0f:34:7d:
7d:39:e7:a8:34:d0:d9:62:dd:fb:d2:9c:7a:20:48:
5f:b5:1b:2d:f3:3a:7a:9e:5a:7e:c5:36:1b:6c:ad:
2f:97:bd:b4:74:e2:8d:81:57:1e:f2:27:c3:2f:4c:
6f:71:ed:a4:9f:02:d9:f7:46:73:70:4f:d4:10:a4:
7d:36:2d:0b:c0:45:58:da:55:cf:ef:ba:e0:61:7e:
e1:9f:01:c8:21:30:7f:23:d0:21:e3:53:dd:1c:b2:
ed:23:46:a4:ab:a7:9a:d5:c0:ca:56:c1:4a:82:0a:
f7:de:ba:9c:33:85:2d:82:d6:fa:e2:ea:55:f2:f6:
06:9b:6f:36:f5:3f:48:6b:71:23:d3:c7:e8:73:8e:
3d:8e:67:5a:48:62:ac:93:de:b5:dd:e7:e8:e8:97:
1e:ae:9a:db:bd:d2:fd:dc:84:8c:08:fd:af:1a:33:
56:85:80:51:44:4e:2e:90:6f:05:5e:b1:ac:ce:a3:
70:ab:8b:34:88:92:f1:6d:ef:28:61:0f:43:fa:30:
3b:a0:04:e5:05:1f:1a:22:b8:5f:60:0b:4c:f4:55:
36:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BB:11:EA:54:7D:1F:C4:83:37:F3:72:83:02:8B:FD:FB:19:B1:14
X509v3 Authority Key Identifier:
keyid:F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:04:ad:ae:2d:1b:fc:2f:09:25:f6:d7:40:aa:04:7d:33:02:
60:60:4b:5d:29:1a:c4:4a:48:32:d8:2b:fe:f2:c2:7e:e3:d3:
3b:bd:79:9a:3e:d5:38:ca:87:d2:64:9d:05:91:21:8b:7e:5e:
5b:d7:e4:b6:55:05:8a:bc:e1:e7:30:92:0f:f1:67:77:36:a1:
74:85:09:03:4a:38:5d:52:42:9e:d1:9f:73:a3:56:f8:53:31:
2a:b4:c9:2c:33:ed:80:7b:0c:79:8e:01:00:c0:52:02:81:d2:
f2:51:61:7c:f0:95:f9:47:e0:38:b1:9c:f0:c0:3b:8f:9b:72:
cd:5b:5a:00:af:cf:1e:7e:d3:0c:bc:53:17:c9:b3:54:a8:42:
6d:ca:55:93:87:ec:38:79:3c:1b:d9:3d:36:33:f3:7e:57:0e:
c6:c8:73:b1:e9:02:6d:78:1a:50:64:4c:4a:d4:8a:6c:ac:6a:
25:d0:9b:9b:8b:00:f6:1a:2f:38:02:84:d3:f5:03:5b:cf:3e:
f0:4e:8b:a8:ca:15:3d:44:41:7f:f7:92:da:9a:36:10:0f:da:
28:cd:c5:4c:ab:e5:e1:fb:28:69:6f:a9:bc:57:57:e3:8e:92:
9b:d1:1d:ca:16:11:0d:8f:ae:75:29:8d:21:93:94:ad:2c:d1:
74:11:0f:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWprtKrzqWAOJEj8DyGN6GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YjlkZDllMzRmZTY2ZDc1MTM4OTAzNzA4ZjhjZTFmYmQz
NDJkNjQwHhcNMjUwODExMDEwMjQ1WhcNMjUwODEyMDEwMjQ1WjAzMTEwLwYDVQQD
Eyg0Y2JiMTFlYTU0N2QxZmM0ODMzN2YzNzI4MzAyOGJmZGZiMTliMTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYdfm0aNZNFBhBig5lXuYlQKWAye
fNpShXrhOHTW6gote3JE4lArsOYPNH19OeeoNNDZYt370px6IEhftRst8zp6nlp+
xTYbbK0vl720dOKNgVce8ifDL0xvce2knwLZ90ZzcE/UEKR9Ni0LwEVY2lXP77rg
YX7hnwHIITB/I9Ah41PdHLLtI0akq6ea1cDKVsFKggr33rqcM4Utgtb64upV8vYG
m2829T9Ia3Ej08foc449jmdaSGKsk9613efo6JcerprbvdL93ISMCP2vGjNWhYBR
RE4ukG8FXrGszqNwq4s0iJLxbe8oYQ9D+jA7oATlBR8aIrhfYAtM9FU2QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEy7EepUfR/EgzfzcoMCi/37GbEUMB8GA1UdIwQY
MBaAFPS53Z40/mbXUTiQNwj4zh+9NC1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxuZG5qVC1adGRST0pBM0NQak9INzAwTFdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9lY2FmNDQtMDhjYy00MWJiLTgxZDMt
MjYyYmVjNzE3YjE3LzEvOUxuZG5qVC1adGRST0pBM0NQak9INzAwTFdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9lY2FmNDQtMDhjYy00MWJiLTgxZDMtMjYyYmVjNzE3YjE3
LzEvOUxuZG5qVC1adGRST0pBM0NQak9INzAwTFdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQAStri0b
/C8JJfbXQKoEfTMCYGBLXSkaxEpIMtgr/vLCfuPTO715mj7VOMqH0mSdBZEhi35e
W9fktlUFirzh5zCSD/FndzahdIUJA0o4XVJCntGfc6NW+FMxKrTJLDPtgHsMeY4B
AMBSAoHS8lFhfPCV+UfgOLGc8MA7j5tyzVtaAK/PHn7TDLxTF8mzVKhCbcpVk4fs
OHk8G9k9NjPzflcOxshzsekCbXgaUGRMStSKbKxqJdCbm4sA9hovOAKE0/UDW88+
8E6LqMoVPURBf/eS2po2EA/aKM3FTKvl4fsoaW+pvFdX446Sm9EdyhYRDY+udSmN
IZOUrSzRdBEPFA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 08:46:57 2025 by rpki-client